Lawsuit filed over MGM data breach